Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GYhTBKAmrZ8b8fnLjLzzLCLvbYg.roa
File: GYhTBKAmrZ8b8fnLjLzzLCLvbYg.roa (raw, json)
Hash identifier: VDXWWJkSl+GOa4KL1phrUeiuhc8dNPsp+kwk7qWaXgA=
Subject key identifier: 19:88:53:04:A0:26:AD:9F:1B:F1:F9:CB:8C:BC:F3:2C:22:EF:6D:88
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019812165086438A92F58332B26E07C4DCBE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GYhTBKAmrZ8b8fnLjLzzLCLvbYg.roa
Signing time: Wed 16 Jul 2025 07:15:09 +0000
ROA not before: Wed 16 Jul 2025 07:15:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.57.52.0/24 maxlen: 24
31.57.186.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
31.59.168.0/23 maxlen: 23
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Jul 2025 07:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:16:50:86:43:8a:92:f5:83:32:b2:6e:07:c4:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 07:15:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19885304a026ad9f1bf1f9cb8cbcf32c22ef6d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:98:40:70:d2:08:85:17:1f:61:6c:2f:82:
bd:d4:51:dc:45:36:85:47:d4:93:fa:d9:97:66:96:
2f:f6:69:6c:45:f8:c3:02:5f:c8:3e:e2:6c:d8:b6:
55:15:56:4a:89:db:69:22:14:d9:3c:5e:bb:fd:bc:
f0:9a:9c:2c:e4:2f:f8:90:a2:cc:7c:0c:76:c0:ea:
9d:ae:a0:90:87:75:bb:5b:de:82:9d:f9:90:31:6e:
39:62:6b:18:97:9a:bb:02:23:60:7a:76:db:e5:ff:
23:ba:37:3c:fe:60:c9:c0:27:2d:96:1f:c6:fa:09:
19:85:93:67:12:f2:b5:5b:79:de:c9:b9:b8:1f:25:
49:ba:27:62:e7:6f:ce:d3:07:8e:80:6e:79:1b:1d:
6d:a7:61:9b:e8:a1:91:1c:6f:c4:9f:5c:27:0e:3f:
95:5a:e7:38:1f:79:ee:1d:83:ba:bf:c3:2b:36:b1:
72:4b:9a:d2:d5:d5:a2:cc:de:a3:0d:7d:03:e3:5e:
6d:dd:82:aa:4c:54:fc:3f:d1:52:cd:e3:fe:c3:82:
66:db:1c:32:50:bd:7c:6c:a2:5f:3c:c9:b0:3b:23:
a0:e0:47:76:0c:5e:d9:ce:b5:9f:92:ab:69:2a:32:
10:70:0d:94:5a:a8:51:17:fe:86:11:4f:37:f3:8b:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:88:53:04:A0:26:AD:9F:1B:F1:F9:CB:8C:BC:F3:2C:22:EF:6D:88
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GYhTBKAmrZ8b8fnLjLzzLCLvbYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.220.0/24
31.57.52.0/24
31.57.186.0/24
31.57.238.0/24
31.59.168.0/23
31.59.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:e8:58:64:76:e8:a9:2c:00:db:1f:91:b4:c8:a3:80:eb:ea:
73:59:f9:e8:eb:3d:11:77:20:3a:0e:0f:12:11:a5:f1:6f:37:
cd:97:2a:0a:f2:5a:48:44:b0:43:69:e3:c2:28:92:7d:6c:0d:
e3:47:7c:a0:68:01:58:81:ef:48:ae:2c:4c:65:97:5a:13:02:
51:8c:a2:bf:db:55:09:3d:02:9f:2d:59:99:5a:77:bd:93:de:
e7:56:99:7b:fc:59:51:01:1f:2f:9e:31:66:f3:bb:0b:c8:38:
5b:af:e8:60:8e:c3:38:d3:b3:3b:00:51:2b:eb:76:7e:aa:d3:
e4:3b:bf:ae:c4:a5:a8:02:ff:74:17:b5:d1:0f:e3:2e:b3:c8:
09:be:40:ae:67:1f:c2:7f:37:91:e9:84:f8:24:53:d5:10:2f:
81:fd:c5:e9:0f:9e:5f:94:cc:43:43:93:95:4f:52:0d:64:c5:
3b:0e:4c:41:2a:2a:17:5a:fc:a3:41:c2:75:4d:c8:2f:2e:6c:
fd:ea:ed:28:94:f3:aa:03:b7:a7:17:b3:c6:d2:a2:83:4f:06:
f0:ec:8b:bd:73:e9:89:04:a0:ea:22:44:ae:d4:08:6e:bf:c0:
68:b8:b3:e6:0e:53:92:f7:46:09:1d:cc:22:fe:86:57:0e:6b:
d9:b6:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:15 2025 by rpki-client